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(54) Content Filtering for Web Browsing 

(57) The present Invention provides a system and 
method for controlling whether a user may access cer- 
tain Internet sites when using a computer The syst^n 
and method are carried out on a personal computer hav- 
ing a local ratings cache, a cache refresher, a local rat- 
ings interpreter and an allow-block list When the com- 
puter user attempts to access an Internet site refer- 
enced by a specified Uniform Resource Loc^ator 
("URL"), the Invention determines whether the URL is 
referenced on the allow-block list and, if so, allows or 
disallows access to the site referenced by the URL ac- 
cordingly if the URL is not referenced on the allow-btock 



list, the Invention obtains a content category from either 
the local ratings cache or, if not contained therein, a rat- 
ings service If the content category may be viewed by 
a person in the user's age group, as detenrnlned by ref- 
erence to an age group map cross-referencing age 
group to pennissibly viewable categories for each such 
age group, the local ratings interpreter penmits access 
to the Internet site referenced by the specified URL; oth- 
erwise, access is not allowed A copy of the settings for 
the user, such as the age group, the allow-block list and 
the age group map, are stored on a content settirtgs 
service so that the user's settings can be accessed and 
used on any computer the user is operating 
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Description 
TECHNICAL FIELD 

s [0001 ] The present invention relates to a computer system and, more particularly, to a system and method for enabling 
an administrator to prevent a user from accessing selected internet web sites 

BACKGROUND OF THE INVENTION 

10 [0002] The cun'ent computing era has been aptiy temied an "Information Age " On-line Information proliferates daily, 
attracting many young people to the ranks of computer users Parents often encourage children to learn about com- 
puters, including use of the internet The internet offers access to a wealth of educational, entertainment and similar 
materials of Interest to young people Unfortunately, the intemet Is also replete with information Inappropriate for young 
people Children can be very curious in exploring web sites on the Intemet, and parents often cannot provide constant 

19 monitoring of a child's Intemet usage 

.[0003] To assist parents in monitoring Internet usage, web site rating services have been developed These on-line 
services categorize web sites according to content For example, the web site www.cnn.com would be in the "News" 
category Software, such as an internet web browser, has In turn been adapted to communicate with the ratings services 
The browser software may allow an administrator to select a level of categories that a user may not view when using 

20 the computer on which the browser software resides A web site in a disallowed category will then be bioci<ed from 
viewing by the browser software The browser software may liitewtee allow, a parent to create a list of disallowed web 
sites For example, the MICROSOFT INTERNET EXPLORER browser software product enables a parent to disallow 
the viewing of web sites on a specific computer by category, such as those falling into various ranges of categories. 
Including Language, Nudity, Sex and Violence A list of individual web sites that can never be viewed may likewise be 

25 created for a specific computer 

[0004] While the current approach affords children some protection from inappropriate web sites, It has many limi- 
tations Existing content filtering approaches can be too broad in blocking access For example, content settings on a 
given computer typically apply to all users of the computer Without additional authorization, adult users may undesirably 
be limited to viewing content suitable for a child user of the computer Similariy, ratings services typically place an entire 

00 web site in a single category that may be blocked for a user The entire web site is then blocked even though portions 
of the web site may contain material appropriate for viewing by the user Likewise, a ratings service might classify a 
web site discussing a subject such as breast cancer In a blocked category, although the parent might be willing to grant 
the child access to this site There is presently no easy mechanism for creating an exception to the blocked access 
without making a specific entry on a specific computer for each such web site that the child might view. 

35 [0005] The existing approach to the use of ratings services can likewise be inefficient When using a ratings service, 
the browser is required to query the sen/ice, which resides on a remote computer, before displaying almost every web 
page These repeated query operations can slow the display of web pages, particularly at currently typical dial-up 
Intemet connection speeds 

[0006] Furthermore, computer-sawy young people may view the circumvention of content monitoring limitations as 
40 a challenge For example, since the content settings apply only to a specific computer, a child may try to access 
othenvlse blocked web sites from a different computer There is presently no satisfactory method for reliably roaming 
a user's content limitations from computer-to-computer Moreover, clever users may be able to defeat some monitoring 
methodologies by using software that Ignores ratings infonnation or by implementing other programming capabilities 
For example, when the content protection Is stored solely on an individual personal computer, attempts could be made 
45 to defeat the protection by uninstalling and re-installing a given browser software and attempting to manipulate certain 
system settings, such as those contained in the MICROSOFT WINDOWS Registry Such attempted system modifica- 
tions could render the personal computer inoperable 

[0007] In summary, the shortcomings of the current web content filter approaches make it difftcuit for parents to 
effectively control a child's web site access 

so 

BRIEF SUMMARY OF THE INVENTION 

[0008] The present invention addresses the limitations in existing parental control technologies by providing a system 
and method for efficiently and dynamically filtering the web sites that a user, such as a child, may permissibly view on 
55 any personal computer The Invention includes providing a local computer with a local ratings cache, a local ratings 
interpreter and an allow-block list The local ratings cache is a locally stored file containing a listing of Internet site 
Identifiers, which typically are Uniform Resource Locators ("URLs"), and the content category for each such web site 
The local ratings interpreter is adapted to receive a web site URL and to determine, based on web site category and 



2 



EP 1 385 097 A2 

the user's ago group, whether a given web site is authorized for viewing by the individual user The allow-block list Is 
a file containing a listing of specific URI^ that the user is expressly authorized to view or expressly prohibited from 
viewing A content settings service is further provided containing settings for the user as detemnined by en administrator 
Such settings include an age group map that cross-references age groups to the categories of web sites permissibly 
5 viewable by the respective age group Such settings may also include the user's ailow-block list and the user's age 
group as determirted and customized by the administrator 

[0009] The local computer user begins by obtaining access to a networic, such as the i ntemel The user's computer 
then normally obtains the user's settings from the content settings service via the network although a locally stored 
version may lilcewise be obtained A URL is then entered on the local computer directing the local computer to attempt 
10 to access the Internet site designated by the URL. The present invention determines whether the URL is referenced 
on the allow-block list if the web site is referenced on the list and Is an altowed site» the web page is displayed if the . 
web site is referenced on the list but is a blocked site, the web page is not displayed 

[0010] If the web site URL is not referenced on the allow-block list or if no aiiow-biock list is avaiiabie, then the 
invention examines the local ratings cache to detennine whether a cached version of the web site's category exists If 

15 so, the category Information is retrieved from the cache If not, the Invention then communicates with a ratings service 
via the network to obtain the web site's content category. The updated category information is written to the local ratings 
cache. If no category infonnation is available for the URL, It Is given a "not categorized" category 
[001 1 ] A local ratings interpreter then determines whether the URL, which is not referenced on the ailow-biock list, 
may be displayed based on the web site category and the settings, such as the user's age group and the age group 

20 map if the age group map shows that the web site category may be viewed by the user's age group, the web site Is 
displayed; otherwise the web site Is not displayed 

[001 2] Additional advantages and the novel features of the Invention will be set forth In the description whteh follows, 
and In part will be apparent to those skilled in the art upon examination of the following, or may be learned by practtee 
of the invention 

25 

BRIEF DESCRIPTION OF THE SEVERAL VIEWS OF THE DRAWINGS 

[0013] The present invention is described in detail below with reference to the attached drawing figures, wherein: 

30 FIG 1 is a block diagram of a computing system suitable for use In implementing the present invention on a 

computer; 

FIG 2 is an overall block diagram of the present Invention; 

FIG 3 is a flow chart illustrating an overview of the present Invention; and 

FIG 4 is a flow chart illustrating the cache refresher of the present invention 

35 

DETAILED DESCRIPTION OF THE INVENTION 

[001 4] The present invention is implemented on a personal computer having an operating system and access to the 
Internet The operating system Is configured to access an Internet site through an interface For example, as will be 
4d understood by those skilled In the art, the MICROSOFT WINDOWS operating system contains the well-known Windows 
Socket or Winsock interface through which all Internet site requests are routed The present invention operates in 
communication with such an Interface to enable and disable access to selected Internet sites, such as by Intercepting 
HTTP requests to access a given site identifier, whk:h could include an identifier such as a Uniform Resource Locator 
or "URL " 

45 [0015] The personal computer Is also supplied with an allow-block list, a local ratings cache, a cache refresher and 
a local ratings interpreter The allow-block list is a listing of specific site Identifiers that the user is expressly authorized 
to view or prohibited from viewing Each user normally has an ailow-block list that Is tailored to the user, although the 
present embodiment may operate without an allow-block list As discussed more fully below, the allow-block lis! may 
be supplied as an XML document, encrypted on the user's computer to avoid unauthorized modification The local 

so ratings cache is a locally stored listing of Internet site Identifiers, including URLs, along with a content category for 
each such site identifier The local ratings cache may likewise be supplied as an XML document, encrypted on the 
user's computer to avoid unauthorized modiffcatlon The cache refresher detenmines whether a specified site identifier 
to be accessed Is already referenced in the local ratings cache and, if not, obtains a content category for the specified 
site Identifier from a ratings servtee whfch is then stored in the local ratings cache The cache refresher may be further 

55 configured to obtain a content category for a site identifier already in the local ratings cache if the content category 
has not been updated during a previous specified period, such as during the previous 90 days The local ratings Inter- 
preter is adapted to determine, based on web site content category and the settings, whether a given web site is 
authorized for viewing by the Individual user A content settings sen/ice Is further provided containing settings deter- 
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mined by an administrator Such settings Include the user's allow-block list, the user's age group as determined and 
customized by the administrator and an age group map 

[0016] The local computer user begins by obtaining access to a networic, such as the internet Upon successfully 
establishing such access, the user's cornputer obtains settings for the user from the content settings service Such 

5 settings Include the user's age group, the age group map listing permissible content categories for at least the user's 
age group and the allow-block list The settings for the user could be transmitted to the local computer In a variety of 
ways, such as by the transmission of one or more XML fiies containing this Information An Internet site Identifier Is 
then entered on the user's computer directing the computer to attempt to access the Internet site designated by the 
site Wentifier The present Invention detenmincs whether the site Identifier Is referenced on the ailow-block list If the 

10 site identifier is referenced on the aHow-block list and Is an allowed site, the web page is displayed If the site identifier 
Is referenced on the allow-block list but is a blocked site, the web page is not displayed 

[001 7] If the site Identifier is not referencedon the allow-block list or If no allow-block list Is available, then the Invention 
examines the kical ratings cache to detemnine whether a cached version of the web site's content category exists If 
so, the content category is retrieved from the cache if not. the invention then communicates with a ratings service to 

is obtain the web site's content category The updated content category Infomiation Is viffitten to the local ratings cache 
If no rating Infonnatbn is available for the site identifier, it is gh/en a "not categorized" content category 
[001 8] The local ratings 1 nterpreter then determines whether the site may be displayed based on the web site content 
category and the settings for the user If the age group map shows that the web site category may be viewed by the 
user's age group, the web site is displayed; othenvlse the web site Is not displayed 

20 [0019] Having briefly described an embodinrwnt of the present invention, an exemplary operating system for the 
present Invention is described below: 

Exemplary Operating Environment 

23 [0020] Rgure 1 illustrates an example of a suitable local computing system environment 100 on which the invention 
maybe implemented The computing system environment 100 Is only one example of a suitable computing environment 
and is not intended to suggest any limitation as to the scope of use or functionality of the invention Neither should the 
computing environment 1 00 be interpreted as having any dependency or requirement relating to any one or combination 
of components Illustrated in the exemplary operating environment 100 

30 [0021] The invention may be described in the general context of computer-executable instructions, such as program 
modules, being executed by a computer Generally, program modules include routines, programs, objects, components, 
data structures, etc. that perform particular tasks or implement particular abstract data types Moreover, those sidlled 
in the art will appreciate that the Invention may be practiced with other computer system configurations, including hand- 
held devices, multiprocessor systems, mcroprocessor-based or programmable consumer electronics, minicomputers, 

35 mainframe computers, and the like The Invention may also be practiced in distributed computing environments where 
tasks are perfonmed by remote processing devices that are linked through a communications network In a distributed 
computing environment, program modules may be located in both local and remote computer storage media including 
memory storage devices 

[0022] With reference to FIG 1 , an exemplary system 1 00 for Implementing the Invention includes a general purpose 
40 computing device In thefonn of a computer 110 Including a processing unit 120, a system memory 130, and a system 
bus 121 that couples various system components Including the system memory to the processing unit 120 
[0023] Computer 1 1 0 typically includes a variety of computer readable media By way of example, and not limitation, 
computer readable media may comprise computer storage media and communication media The system memory 1 30 
includes computer storage media in the fomn of volatile and/or nonvolatile memory such as read only memory (ROM) 

49 131 and random access memory (RAM) 132 A basic Input/output system 133 (BIOS), containing the basic routines 
that help to transfer information between elements within computer 110, such as during start-up, is typically stored in 
ROM 131 RAM I32typicalty contains dataand/orprogrammodulesthatareffnmediatetyaccessibletoand/orpresently 
being operated on by processing unit 120 By way of example, and not limitation, FIG 1 illustrates operating system 
134, application programs 135, other program modules 136, and program data 137 

50 [0024] The computer 110 may also include other removable/nonremovable, volatile/nonvolatile computer storage 
media By way of example only, FIG 1 illustrates a hard disk drive 141 that reads from or writes to nonremovable, 
nonvolatile magnetic media, a magnetic disk drive 151 that reads from or writes to a removable, nonvolatile magnetic 
disk 152. and an optical disk drive 155 that reads from or writes to a removable, nonvolatile optical disk 156 such as 
a CD ROM or other optical media Other removable/nonremovable, volatile/nonvolatile computer storage media that 

55 can be used In the exemplary operating environment Include, but are not limited to, magnetic tape cassettes, flash 
memory cards, digital versatile disks, digital video tape, solid state RAM. solid state ROM, and the like The hard disk 
drive 141 Is typically connected to the system bus 121 through a non-removable memory Interface such as interface 
140, and magnetic disk drive 151 and optical disk drive 155 are typically connected to the system bus 121 by a remov- 
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able memory interface, such as interface 150 

[0025] The drives and their associated computer storage media discussed above and illustrated in FIG 1 , provide 
storage of computer readable instructions, data structures, program modules and other data for the computer 11 0. In 
FIG . 1 , for example, hard disk drive 1 41 is illustrated as storing operating system 1 44, application programs 146, other 

5 program modules 1 46, and program data 147 Note that these components can either be the same as or different from 
operating system 134, application programs 136, other program moduies 136, and program data 137 Operating system 
144, application programs 145, other program moduies 146, and program data 147 are given different numbers here 
to Illustrate that, ataminimum, they are different copies A user may enter commands and information intothe computer 
1 1 0 through Input devices such as a tceyboard 1 62 and pointing device 1 61 , comnnonly refen^ to as a mouse, trackball 

10 or touch pad Other Input devices (not shown) may include a microphone, Joysttek, game pad, satellite dish, scanner, 
or the like These and other input devices are often connected to the processing unit 1 20 through a user input interface 
160 that is coupled to the system bus 121 , but may be connected by other Interface and bus structures, such as a 
parallel port, game port or a unwersal serial bus (USB) A monitor 1 91 or other type of display device Is also connected 
to the system bus 121 via an Interface, such as a video interface 1 90 In addition to the monitor, computers may also 

IS include other peripheral output devices such as speakers 197 and printer 196, which nwiy be connected through an 
output peripheral interface 195 

[0026] The computer 1 1 0 inthe present Invention will operate In a networked environment using logical connections 
to one or more remote computers, such as a remote computer 180 The remote computer 1 80 may be a personal 
computer, and typically Includes many or ait of the elements described above relative to the computer 110, although 

20 only a memory storage device 1 81 has been illustrated in FIG. 1 The logical connections depicted in FIG 1 1nclude a 
local area network (l_AN) 171 and a wide area network (WAN) 173, but may also include other networks 
[0027] When used In a LAN networking environment, the computer 110 Is connected to the LAN 171 through a 
network Interface or adapter 1 70 When used in a WAN networking environment, the computer 110 typically includes 
a modem 172 or other means for establishing communications over the WAN 173, such as the Internet The modem 

23 172, which may be internal or external, may be connected to the system bus 121 via the user Input interface 160. or 
other appropriate mechanism In a networked environment, program modules depicted relative to the computer 110, 
or portions thereof, may be stored In the remote memory storage device. By way of example, and not limitation, FIG 
1 1llustrates remote application programs 1 8S as residing on memory device 1 81 It will be appreciated that the network 
connections shown are exempla/y and other means of establishing a communications link between the computers 

30 may be used 

[0028] Although many other internal components of the computer 1 1 0 are not shown, tiiose of ordinary skill in the 
art will appreciate that such components and the interconnection are well known Accordingly, additional details con- 
cerning the Internal construction of the computer 110 need not be disclosed in connection with the present invention 

35 Content Rlterlng For Web Browsing 

[0029] FIG 2 iNustrates an overall block diagram of a networking environment of an embodiment As shown in FIG. 
2, a local computer 202 is shown that may be an IBM compatible PC or other type of personal computer The local 
computer has an operating system configured to direct all attempted accesses to the internet thro ugh a single interface, 

40 such as the MICROSOFT WINDOWS XP operating system, which uses the well-known Wlnsock interface Residing 
on local computer 202 are an allow-block list 204, a cache refresher 205, a local ratings interpreter 206, settings 207 
and a local ratings cache 208 Local computer 202 has a connection with network 210, which may be the Internet or 
other network Local computer 202 may communicate with content settings sen/ice 212 via network 210 Content 
settings service 21 2 may likewise contain settings 213 that can Include an age group for a user, an allow-block list and 

45 an age group map Content settings service 212 is likewise coupled with network 210 for communication with ratings 
service 21 4 that in turn may be connected and can access the commercial categorization service 21 6 Content settings 
service 212 and ratings service 214 may be Implemented using standard server hardware and an Internet server 
software, such as the MICROSOFT INTERNET INFORMATION SERVER product Ratings sen»/fce 214 is provkled 
with a desired set of site identifiers, such as URLs and. for each such URL, a content category Rating servtee 214 is 

50 configured to accept a content category query from local computer 202 and to respond to local computer 202 with the 
content category of the supplied site identifier An administrator computer 220 is provided that can communicate via 
network 210 with the content settings service 212 to create and edit settings for selected users 
[0030] As win be understood by those skilled in the art, commercial web site categorization services are available 
Such services typteally place internet site Identifiers, such as URLs, in certain predefined categories corresponding to 

55 the web site's content. For example, a web site categorization servrce is offered by the Surf Control Company at www. 
SurfControl.com Available content categories could include: 
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15 



20 



25 



30 



35 



1 AduH/Sexualty Explicit 


15 Hacking 


28 


Reference 




1 D noie opeecn 


£9 




3 Arts & Entertainment 


17 Health & Medicine 


30 


Remote Proxies 


4 Chat 


18 Hobbies & Recreation 


31 


Search Engines 


5 Computing & Internet 


19 Hosting Sites 


32 


Sex Education 


6. Criminal Skiils 


20 Job Search 


33 


Shopping 


7 Drugs, Alcohol, Tobacco 


21 Kid's Sites 


34 


Sports 


8 Education 


22 Lifestyle & Culture 


35 


Streaming Media 


9 Rnance & Investment 


23 Motor Vehicles 


36 


Travel 


10 Food & Drink 


24 News 


37 


Usenet News 


11 Gambling 


25 Personals and Dating 


38 


Violence 


12 Games 


26 Photo Searches 


39 


Weapons 


13 Glamour/Intimate AppI 


27 Real Estate 


40 


Web-based Email 


14 Government & Politcs 









40 



[0031] As will be understood by those skilled in the art, a local computer may query a ratings service by supplying 
the ratings sen<ice with a specified site identifier The ratings service may be separate from a commercial categorization 
service and may communicate with such a service to obtain web site categorization Infonmation therefrom When 
queried by local computer 202, the ratings service will normally respond with the content category of the specified site 
identifier For example, local computer 202 could supply the site identifier www.cnn.com to ratings service 214, which 
oouid respond to local computer 202. using the above content categories, that the site identifier Is in content category 
24 for "News." 

[0032] FIG 3 Illustrates an overall flow chart of an embodfrnent The method begins at step 240 whereupon the user 
of the personal computer logs In to the operating system As will be appreciated by those skilled In the art, a user 
account is set up by a system administrator or the user's parent such that settings for the user are stored The settings 
can include a variety of infonnation, including the user's user ID, password and age group After the user has been 
authenticated to the operating system at step 240, the embodiment obtains the latest settings for the user and the 
allow-bk)ck list at step 242. In this context, user setting Include the user's age group and an age group map The 
number of age groups need not be fixed For example, four age groups could be created Age group 1 could be the 
most restrictive, such as foryoung children ages 1 2 and under Age group 2 could be somewhat less restnctlve, perhaps 
targeted for children ages 13-15. Age group3could be even further less restrictive, perhaps targeted for children ages 
16-18, and age group 4 could be Intended for adults, wherein no restrictions on web site access would apply. An 
administrator determines In advance the user's assigned age group by communicating such age group from adminis- 
trator computer 220 to content settings sen/ice 212 in this regard, It will be understood that the age groups could be 
abstracted, such that age group 1 for a given user could differ from age group 1 for another user 
[0033] An age group map Is a cross-reference defining the content categories that each designated age group may 
view The age group map may be provided as an XML document, such as the following: 



55 



6 



EP1 385 097 A2 | 



10 



15 



20 



45 



<Groups> 

<Group name = "Young Child" description" descriptions" Ages up 
to 9" id = "1"> 

<Allowed> 

<caOl8</cat> 
<cat>21</cat> 
</Allowed> 
</Group> 

<Group name Adult" descriptions" Ages 18 and up" id="4"> 
</Gioup> 
</Groups> 



[0034] As will be appreciated by those skilled In the art, the above XML document contains appropriate designations 
for an age group, here showing an age group for "Young Child" designated as age group 1 Under the "Aiiowed" tag. 
two categories of web sites are allowed for viewing, namely categories 18 and 21. Simiiariy, an age group for "Adur 
25 Is shown having age group 4 A user having an "Adult" age group is not restricted in the above example as to viewing 
a web site with respect to the content categories 

[0035] Settings for the user may include category definition data provided as an XML document in the following 
fonnat: 

30 

<Categories> 

<Categoiy name="Adveitisement5" description="Advertising and 
35 Marketing" id="2" /> 

<Category name="Hobbies/Recrcation" dcsciiption="Coin Collections and 
RVPaiks"id^"18"/> 

40 <Caiegoiy name="Search Engines" description="Web Site Searching" 

id="31"/> 

</Categories> 



[0036] Hare, the XML tags "name" and "description" provide a description of the category Thus, the first entry shown 
above is category 2, which signifies that a web site contains advertising and marketing content As shown above, 
numerous content categories could be listed in this manner In this way. the local computer may have descriptive text 
associated with a given content category number 
so [0037] The local ratings cache Is a file on the local computer that contains site Identifiers previously accessed by 
any user of the local computer For each such site identifier, the cache also contains the content category for the site 
identifier and the date on which the site identifier was last obtained from the ratings service The local cache could 
likewise be provided in the XML format, such as the foilov;lng: 
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<?xml version="1.0" encoding ^"utf-B'' ?> 
<RatingsCache verslon="2"> 
^ <CacheEntrfe5> 
- - <CacheEntry> 

<ui1>ads.msn.com</url> 

<CacheEntries> 
< u rl > ads . NBCQQL/O01394370005_TX,glf?r=:963 

</uri> 

<cat>2</cat> 

</CacheEntry> 

<CacheEntries> 
" <url>ads.cm2925newasscmblym_4.gif</uri> 

<cat>2</cat> 
</CacheEntTy> 
<CacheEntrles> 

<uii>ads.msn.coin/abc/'*' </url> 

<cat>2</cat> 



</CacheEntry> 
^ </CacheEntries> 

- </CacheEntry> 
2_ <CacheEntry> 

" <url> www.nbc.com/* </uri> 

<cat>3</cat> 

<Ct> 2002-04- to </ct> 
</CacheEntry> 
^ <CacheEntry> 

< u rl > www. moonpo rt.com/ * </u rl > 
<cat>21</cat> 

<Ct> 2002-03-21 </ct> 
</CacheEntry> 
<CacheEntry> 

< u rl > www.cbs.com/ * </u rl > 
<cat>3</cat> 

<ct > 20 02-04-09 </ct > 
</CacheEntry> 
</CacheEntries> 
</RatingsCache> 

[0038] The use of the focal ratings cache aids efficiency when the site identifier sought is in the cache by avoiding 
having to query a ratings service The local ratings cache is designed with two levels: a primary cache and a secondary 
cache A primary cache entry is a domain level site identifier such as www.cbs.com. The local ratings cache may 
contain a designation that signifies that all pages beneath the primary site identifier are governed by the designated 
category In the above example, www.cbs.com/* signifies that the entire web site is governed by the category desig- 
nation, which Is shown as "3 " Alternatively, a secondary cache entry is a directory or page below a primary site identifier 
and may be optionally employed when several pages or directories below the same primary site identifier have different 
content category values For example, www.xvz.com/abc/* could have a content category of 6, but www.xyz.com/def/ 
could have a content category of 12 Such HPRlgnaiions would mean that all pages below the www.xvz.com/abc/ domain 
level would have content category 6, and all pages below the www.xvz.com/def domain level would have content 
category 12 Similarly, specific secondary site identifier references couid be included without using the wildcard, 
such as shown In the above example as ads NBCQQL/001394370005_TX gif?r=963 
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[0O391 The local ratings cache is normally encrypted so that a user cannot modlty the category or date associated 
with a site Identifier In the local cache The local ratings cache may be stored as a separate file, as part of a larger file 
or elsewhere on a storage device Moreover, the local ratings cache could be limited to a designated number of entries, 
such as 250, purging older entries on a first-in, first-out, basis, based on the date shown In the <ct> or similar XML tag 
s containing the date on which the content category for the gh^en site Identifier was last updated In the local ratings cache 
[00401 The local computer may be further supplied wtth an allow-block list containing site Identifiers and, for each 
such site identifier, a designation of whether viewing of the site Identifier by the user is allowed or disallowed The 
allow-block list may likewise be supplied in the XML format, such as 

<Chad name=*Toby" id=*'r'i> 
<Alloved> 
<Site IJRL =http://espn. go.com/* l> 

13 

<Site UM ^http:y/commitnities.msnxom/ppape/gradma.htm /> 
</A]lowed> 

20 <Blocked> 

<Site URDshttpi/Zwww^ultsitccom/* /> 
</Blocked> 
25 </aiild> 

[0041] Thus, the allow-block list has a tag designated as "Child name" to Identify the applicable user Allowed site 
identifier s are listed under the "Allowed" tag, and blocked site identifier s are listed under the "Blocked" tag as shown 
above The allow-block list may contain a primary site identifier that applies to all Individual web pages and other 

30 resources referenced under the site identifier Thus, in the above example, the wvyw.adultsite.com/* entry, having an 
asterisk and being within the <B[ocked> tags, causes the entire site for www.adultsite^com to be blocked. Other web 
pages having a site identifier reference beginning with "www adultslte com" would thus be governed by the aiiow-block 
designation given the primary site identifier Alternatively, a secondary site Identifier may be specified in the allow-block 
list to govern access to an Individual web page without affecting access to other pages for a given site identifier. Thus, 

35 an entry such as http:/ycommunities.msn.com/ppage/gradma.htm. would apply only to the specific page and not to 
other pages under the main site Identifier, here communities msn com Alternatively, the secondary site Identtfier www. 
xvz.com/abcT would apply the allow or block designation to all web page at or below the www.xvz.com/abc/ domain 
level In this way, a site Identifier entered by a user may be referenced on the allow-block list, even if the specified site 
Identifier Is not contained verbatim In the allow-block list, so long as the domain reference to the site identifier is con- 

40 talned therein Under the present embodiment, an administrator or parent may choose not to expressly enable or 
disable access to any site identifier, thus obviating the need for an allow-block list for the given user. 
[0042] At step 244, the user, or an application running on the personal computer, enters a specified site identifier 
that references an Internet sile Examples of such site Identifiers include designators such as www microsoft.com but 
could also Include an Internet Protocol (IP) address After the site Identifier has been entered, the embodiment deter- 

45 mines whether the site Identifier is on the allow-block list at step 246 In this regard, the precise site Identifier entered 
by the user may be referenced on the allow^lock list Alternatively, the specified site identifier may be referenced by 
a primary site identifier entry or a secondary site Identifier entry encompassing the domain of the site identifier entered 
In the latter case, the allow-block list could contain an entry such as wwwcbscom/* in the "allowed" portion of the 
allow-block list signifying that all pages at the www.cbs.com domain could permissibly be viewed A user could enter 

50 a specified site identifier such as www.cbs.com/news/storv.htmL The allow-block list, having the www.cbs.com/* entry 
would thus reference and include the specified site identifier 

[0043] If the site Identifier is referenced on the allow-block list, control passes to step 248 where it is detemnined 
whether the site Identifier is designated as blocked on the allow-block list. If the site Identifier Is blocked, then at step 
250. a message may be provided to the user advising that the display of the page is blocked If, on the other hand, at 
55 step 248 the display of the page is not blocked, then control passes to step 252 which detemnines whether the page 
was blocked or displayed. If at step 252 the page Is displayable. control passes to step 254 wherein the web page Is 
displayed If, on the other hand at step 252. the web page is not displayable, control passes to step 266 and processing 
under the embodiment ends 
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[0044] If. on the other hand at step 246, the site identitier is not referenced on the allow-block list or no alJow-block 
list Is available, then the embodinnent step 262, processes the site Identifier in accordance with the cache refresher, 
discussed more specifically below, so that a content category for the site Identifier is obtained The content category 
is accessed by the local ratings interpreter 264, which determines whether the site identifier may be accessed In 
« making this determination . the local ratings interpreter determines from the age group map whether a person In the 
user's age group may penmisslbly view a site identifier having the given content category The local ratings Interpreter 
may be Implemented In a variety of ways, such as by using the MICROSOFT VISUAL C-h- programming language 
Control then passes to step 252 and proceeds as previously discussed above 

[0045] The local ratings adapted may be further adapted to pennit access to site Identifier s that are ancillary to a 
10 main site Identifier For example, the site Identitier www.mlcfosoft.com may be provided by a user The web page 
referenced by this main site identifier may In turn contain ancillary site identifiers that reference various other resources 
intended to be displayed as part of the web page referenced by the main site identifier, such as graphics The local 
ratings adapter can be configured to allow or disallow access to such ancillary site identifier s based on the access, 
or lack thereof, allowed for the main site Identifier without first obtaining for a specific content category for the ancillary 
1^ site identifier 

[0046] FIG 4 Is a flow chart Illustrating In further detail the cache refresher referenced in FIG 3 at step 262 As will 
be appreciated by those skilled in the art. the cache refresher could be implemented in a variety of ways, such as by 
using the IVIICROSOFT VISUAL C++ programming language In FIG 4, cache refresher 262 begins by obtaining the 
specified site identifier at step 280 If at step 282 the specified site identifier is referenced In the local ratings cache, 

20 then control passes to step 284 to detennine whether the content category for the specified site identifier is sufficiently 
recent As noted above, in this context, it is not necessary for the specified site Identifier to be contained verbatim in 
the local ratings cache as long as a reference to the SITE IDENTIFIER, such as a reference to its domain. Is contained 
therein In determining whether the content category is sufficiently recent, the embodiment might for example require 
that the content category have been updated within the last 45 days if at step 284, the content category Is not deemed 

25 sufficiently recent, then control passes to step 286 and the present method obtains a content category from the ratings 
service For example, if the cache refresher requires that a content category be no more than 45 days old, a content 
category would be obtained even if a site Identifier was referenced in the local ratings cache if the site identifier's 
content category were last updated 120 days ago The number of days after which a cache entry expires couW be 
changed based upon perfomnance feedback so that 45 days is an approximate time period of expiration Control then 

30 passes to step 288, whereupon the updated content category information is written to the local ratings cache and the 
updated content category information at step 290 is communicated to the local ratings Interpreter 
[0047] if, on the other hand, at step 282 it is detennlned that the site Identifier is not referenced in the local ratings 
cache, then control passes to step 291 and the site identifier is written to the local ratings cache Control then passes 
to step 292 and the content information is sought from the ratings service Such information could be requested and 

as communicated In a variety of ways. For example, the request for a content category for the site identifier http7/www. 
xyz.com could be fomiulated using the XML language as follows: 

<RatingsRequest id="741834*'> 

40 

<uii id="l** address =http://www.xvz.com /> 
</RatingsRequest> 

45 [0048] After receiving the content category request, the ratings service could determine that the specified site iden- 
tifier was in content category 4 and respond to the request using the XML format, such as: 
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<?xml version ="1 .0'* encoding=*TJTP-8" ?> 
<RatingsResponse id="741834"> 
<Rating reqid="l*'> 

<cache hmt =www.xvzxom/* l> 
<category value="4" A> 
<^ting> 
</RatingsResponse> 

[0049] Upon obtaining the content category information, control passes to step 288 for processing as discussed 
above 

[0050] in operation, an administrator or parent would supply the content settings service with settings for a specified 
user Such settings could include the user's age group, age group map and an allow-block list The infomnation could 
be supplied using, for example, an HTTP POSTcommand to transmit data or an XML file to the content settings service 
For purposes of the present example, the user's age group is "1" and the age group map appears as follows for the user: 

<Groups> 

<Group name = "Young Child** desaiption="Ages up to 9" id = 
<Ailowed> 

<cat>18</cat> 
<cat>21</cat> 
<yAllowed> 
<Blocked> 

<cat>l</cat> 
</Blocked> 
</Group> 

<Group name =" Adult" description=Ages 18 and up" idss*'4"> 
<yGroup> 
</Groups> 

[Q0S1] Moreover, the allow-block list appears as follows: 
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<Child nainc='Toby- id^**!*^ 
<Allowed> 
<SUe URLs :http://espn.go.coiD/* /> 

<Site lJRI^ http://communities.msnxom /ppage/gradma.htm f> 
<AAllowed> 
<BIocked> 

<Site URL^http-7/www-adultsite..cbm/* t> 
</Blocked> 
</Child> 

[0052] The local computer user would begin by obtaining access to a network, such as the Internet The user's 
computer would then establish a communication session with the content settings service and obtain the settings for 
the user from the content settings service. Such settings include the user's age group and the user's allow-blocic iist 
as well as an age group map A site identifier or URL, such as www.nbc.com/news/storv.htm . Is then entered on the 
user's computer directing the computer to attempt to access the Internet site designated by the site Identifier. The 
present Invention detemilnes whetherthe site Identifier is referenced on the allow-block list In the above example, the 
site identifier Is not contained on the allow-block list, meaning that It Is neither expressly allowed nor disallowed 
[0053] Since the site identifier Is not referenced on the allow-block list, the embodiment then searches the local 
ratings cache For purposes of the present example, the local ratings cache appears as follows: 

<?xml version="1.0" encoding="utf-a" ?> 
- <RatingsCache version="2*> 
^ <CacheEntrie5> 
^ ^ <CacheEntry> 

<url>www.nbc,coin/*</url> 
<cat>3</cat> 
<ct>2002-04-10</ct> 
</CacheEntry> 
^ <CacheEntry> 

<url>www.moonport-com/ *</url> 

<cat>2l</cat> 
<ct>2002-03-21</ct> 
</CacheEntry> 
^ <CacheEntry> 

<url>www.cbs.com/*</url> 
<cat>3</cat> 
<ct>2002"04-09</ct> 
</CacheEntry> 
</CadieEntries> 
</RdtmgsCache> 

[0054] The local ratings cache contains the specified site identifier www.nbc.comT and states that the site Identifier 
has a content category of "3 " The wildcard character employed with this site identifier references ail site identifiers 
beginning with www.nbc.com , meaning that any site identifier beneath this domain name would have a category of "3 " 
The specified URL is beneath the www.nbc^conri and thus referenced by this site identifier entry Since the only category 
blocked in the ago group map in the present example for age group 1 is content category 1 , the user may pemilsslbiy 
view the specified site identifier, and the computer penmits access thereto 

[0055] From the foregoing, the invention can be seen to provide a consumer with a valuable way to filter web sites 
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that may permissibly viewed by a computer user The varlo us computer systems and components shown in FIGS 1 -4 
and described in the specification are merely exemplary of those suitable for use in connection with the present Inven- 
tion Accordingly, the scope of the present invention is defined by the appended claims rather than the foregoing de- 
scription 

5 

Claims 

1 . A system for determining whether a user of a computer having settings for the user may view an internet site 
10 referenced by a specified site Identifier, comprising: a local ratings cache stored on the computerthat includes at 

least one site-Identifier and a content category associated therewith; a cache refresher stored on the computer 
that detennines whether the local ratings cache references the specified site identifier and, if not. obtains a content 
category for the specified site-identifier from a ratings sen/Ice and stores the content category in said local ratings 
cache; and a local ratings interpreter stored on the computer that detemnines based on the settings for the user 
15 and the content category for the specified site Identifier whether to allow the user to access the Internet site ref- 

erenced by the specified site identifier 

2 . The system of claim 1 , further comprising an allow-block list stored on the computer and adapted to contain primaiy 
site Identifiers and secondary site identifiers and, for each such site identifier, a designation of whether viewing of 

20 the site by the user either is allowed or is disallowed, wherein, regardless of the detenni nation by said local ratings 

interpreter, the computer permits access to the site referenced by the specified site identifier if designated as 
allowed and denies access to the site referenced by the specified site Identifier if designated as disallowed 

3- The system of claim 1 , wherein the local ratings cache Is in the Extensible Markup Language C'XML") format 

25 

4. The system of claim 1 . wherein the specified site Identifier is a Uniform Resource Locator fURL") 

5. A system for determining whether a computer user having a designated user age group may view an Internet site 
referenced by a specified site identifier, comprising: an age group map stored on the computer thai designates 

30 content categories of Internet sites that at least the user age group is pemnitted to access; a local ratings cache 

stored on the computer that contains at least one site Identifier and a content category associated therewith; a 
cache refresher on the computer that determines whether the local ratings cache references the specified site 
identifier and. if not, obtains a content category for the specified site identifier from a ratings service and stores 
the content category In said k>cBi ratings cache; and a local ratings interpreter on the computer that determines 

35 whether the age group map permits the user's age group to access the content category for the specified site 

identifier and, If so, penmits access to the Internet site referenced by the specified site identifier 

6- The system of claim 5, further comprising an allow-btock list stored on the computer and adapted to contain primary 
site identifiers and secondary site Identifiers and. for each such site identifier, a designation of whether viewing of 

40 the site by the user either is allowed or is disallowed, wherein, regardless of the detemnlnation by sal d local ratings 

interpreter, the computer permits access to the site referenced by the specified site identifier if designated as 
allowed and denies access to the site referenced by the specified site identifier If designated as disallowed 

7- The system of claim 5, wherein the local ratings cache is in the Extensible Markup Language ("XML") format 

45 

8- The system of claim 5. wherein the specified site identifier is a Uniform Resource Locator ("URL") 

9 . A method for detennining whether a user of a computer may view an Internet site referenced by a specified site 
identifier, wherein the computer has a local ratings cache, comprising: obtaining settings for the user; searching 
50 the local ratings cache to determine whether the local ratings cache references the specified site identifier and. if 

not, obtaining a content category for the specified site IdentifiBr from a ratings service; and detemnining based on 
the'settlngs and the content category for the specified site identifier whether to access the Internet site referenced 
by the specified site identifier 

35 10. The method of claim 9. further comprising determining whether the specified site identifier is on an atlow-block list 
and, if so, enabling access to the site referenced by the specined site identifier if designated in the allow-block list 
as allowed and disabling access to the site referenced by the specified site identifier if designated In the allow- 
block list as disallowed 



13 



EP 1 385 097 A2 1 

{ 

i 

1 1 . The meUiod of claim 9. wherein the settings include an age group for the user 1 

I 

12. TTie method of daim 9, wherein the specified site identifier is a Uniform Resource Locator ("URL") | 

i 
t 

5 1 3 . The method of claim 9, wherein the settings include an age group map specifying Internet site content categories i 
viewable by at least the age group for the user. \ 

14. The method of daim 9, wherein the local ratings cache is in the extensible Mar!<up Language ("XML") format j 

< 

10 15. A method for determining whether a user of a computer may view an Internet site referenced by a specified site | 
identifier, wherein the computer has an allow-bloci< list and a local ratings cache, comprising: obtaining an age | 
group for the user; obtaining an age group map that designates internet site content categories that at least the 
age group for the user Is pennittGd to access; detennining whether the allow-block list references the specified 
site Identifier and. If so. enabling access to the site referenced by the specified site Identifier If designated in the 

is allow-blocic list as allowed and disabling access to the site referenced by the specified site identifier if designated 

in the aliow-block list as disallowed; searching, if the specified site identifier Is not on the aliow-block list, the local 
ratings cache to determine whether the local ratings cache references the specified site Identifier and. if not, ob- 
taining a content category for the designated site identifier from a ratings service; and detemnlning, if the specified 
site Identifier is not on the allow-blocl< list, whether, based on the age group map. tiie user's age group is pemnitted 

20 to access the content category for the specified site identifier, and, if so, permitting access to the internet site 

referenced by the specified site identifier 

15. The method of claim 15, wherein the local ratings cache is in the Extensible Marlcup Language ("XML") fomiat. 
25 17. The method of claim 15, wherein the specified site identifier is a Unlfomi Resource Locator ("URL*^ 

18. A method for determining whether a user of a local computer may view an Internet site referenced by a specified 
site Identifier, wherein the local computer has a local ratings cache and is operable to communicate via a network 
with a content settings service having an age group and aliow-block list for the user and an age group map, conv 

30 prising: obtaining an age group and an aliow-block list for the user from the content settings service; obtaining an 

age group map from the content settings sen/Ice; detemnining whether or not the aliow-block list references the 
specified site identifier and, if so, enabling access to the site referenced by the specified site identifier if designated 
in the aliow-block list as allowed, and disabling access to the site referenced by the specified site identifier if | 
designated In the aliow-block list as disallowed; searching, if the aliow-block list does not reference the specified j ^ 

35 site Idenlifier, the local ratings cache to detemnlne whether the local ratings cache references the specified site I 

identifier and, if not, obtaining a content category for the specified site Identifier from a ratings service; and deter- j 
mining, if the aliow-block list does not reference the specified site identifier, whether, based on the age group map, ' 
the user's age group is permitted to access the content category for the specified site identifier, and, if so, pemnitting 
access to the Internet site referenced by the specified sits identifier 

40 

19. The method of claim 1 8, wherein the step of searching the local ratings cache further Inciudes obtaining a content 
category for the specified site Identifier from a ratings service if the content category for the specified site identifier 
referenced in the local ratings cache has not be updated during a previous specified time period 

45 20.. The method of claim 18, wherein the local ratings cache is in the Extensible IWarkup Language ("XML") format 

21 . The method of claim 18, wherein the spedfied site identifier is a Unlfomi Resource Locator ("URL**) 

22. A system for determining whether a user of a local computer having settings for the user may view an I ntemet site 
so referenced by a site Identifier, comprising: a local ratings cache component stored on the computer, a cache re- 
fresher component on the computer that detenrnines whether th e local ratings cache references the specified site 
identifier and, if not, obtains a content category for the specified site Identifier from a ratings service and stores 
the content categoiy In said local ratings cache; and a local ratings interpreter component on the computer that 
determines based on the settings and the content categoiy for the specified site identifier whether to access the 

55 Intemet site referenced by the spedfied site identifier 

23 . The system of claim 22, further comprising an aliow-block list component stored on the local computer and adapted 
to contain primary site Identifiers and secondary site Identifiers and, for each such site identifier, a designation of 
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whether viewing of the site by the user either Is allowed or Is disallowed, wherein, regardless of the determination 
by said local ratings interpreter the computer permits access to the site referenced by the specified site identifier 
if designated as allowed and denies access to the site referenced by the specified site identifier if designated as 
disallowed 

24« T?ie system of claim 22, wherein the specified site identifier Is a Uniform Resource Locator ("URL") 

25.. A system for determining whether a computer user having a designated user age group may view an Internet site 
referenced by a site Idsntifier, comprising: an age group map component stored on the computer; a local ratings 
cache component stored on the computer; a cache refresher component on the computerthat determines whether 
the local ratings cache references the specified site identifier and, If not, obtains a content category for the specified 
site identifier from a ratings service and stores the content category in said local ratings cache; and a local ratings 
interpreter component that based on the age group map, whether the user's age group is pemriltted to access the 
content category for the specified site identifier, and. if so, permitting access to the Internet site referenced by the 
specified site Identifier 

26. The system of claim 25, further comprising an allow-blocl< list component stored on the computer and adapted to 
contain primary site Identifiers and secondary site identifiers and, for each such site Identifier, a designation of 
whether viewing of the site by the user either is allowed or Is disallowed, wherein, regardless of the determination 
by said local ratings Interpreter, the computer permits access to the site referenced by the specified site identifier 
if designated as allowed and denies access to the site referenced by the specified site Identifier if designated as 
disallowed 

27. The system of claim 25, wherein the specified site identifier is a Unifonnn Resource Locator ("URL") 

28. A system for detonnining whether a user of a computer may view an Internet site referenced by a specified site 
identifier, wherein the computer has a local ratings cache, comprising: means for obtaining settings for the usen 
means for searching the local ratings cache to detemilne whether the local ratings cache references the specified 
site identifier and, if not, obtaining a content category for the specified site identifier from a ratings service; and 
means for determining based on the settings and the content category for the specified site identifier whether to 
access the Internet site referenced by the specified site identifier 

29. The system of claim 28, wherein the specified site Identifier Is a Uniform Resource Locator ("URL") 

30. A system for detenmining whether a user of a computer may view an Internet site referenced by a specified site 
identifier, wherein the computer has an allow-blcck list and a local ratings cache, comprising: means for obtaining 
an age group for the usen means for obtaining an ago group map that designates Internet site content categories 
that at least the age group Is penmitted to access; means for detenmining whether the altow-block list references 
the specified site identifier and, If so, enabling access to the site referenced by the specified site identifier If des- 
ignated in the aHow-block list as allowed and disabling access to the site referenced by the specified site identifier 
if designated In the allow-block list as disallowed; means for searching, If the allow-block list does not reference 
the specified site identifier, the local ratings cache to detemnlne whether the local ratings cache references the 
specified site identifier and. If not. obtaining a content category for the designated site identifier from a ratings 
sen/Ice; and means for determining based on the age group map, whether the user's age group Is pennitted to 
access the content categoiy for the specified site identmer. and, if so, permitting access to the internet site refer- 
enced by the specified site identifier 

31. The system of claim 30, wherein the specified site identifier Is a Uniform Resource Locator ("URL") 

32- A system for determining whether a user of a local computer may view an Internet site referenced by a specified 
site identifier, wherein the local computer has a local ratings cache and is operable to communicate via a network 
with a content settings service containing an age group and allow-block list for the user and an age group map, 
comprising: means for obtaining an age group and an allow-block list for the user from the content settings service; 
means for obtaining an age group map from the content settings service; means for detenmining whether the allow- 
block list references the specified site identifier and, if so, enabling access to the site referenced by the specified 
site identifier if designated in the allow-block list as allowed and disabling access to the site referenced fay the 
specified site identifier If designated in the allow-block list as disallowed; means for searching, if the allow-block 
list does not reference the specified site identifier, the local ratings cache to detemriine if the specified site Identifier 
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Is referenced therein and. if not, obtaining a content category for the specified site Identifier from a ratings service; 
and means for detemiining, If the allow-block list does not reference the specified site identifier, based on the age 
group, the age group map and the content category for the specified site identifier, whether the user may view the 
Internet site referenced by the specified site identifier 

s 

33.. The system of claim 32, wherein the specified site identifier is a Unifomi Resource Locator ("URL"^ 

• 34, A computer-readable medium having computer-executable instructions for perfomilng a method for detenmining 
whether a user of a computer may view an Internet site referenced by a specified site Identifier, wherein the conv 
10 puter has a local ratings cache, the method comprising: obtaining settings for the user; searching the local ratings 

cache to detennine whether the local ratings cache references the specified site identifier and, if not, obtaining a 
content category for the specified site identifier from a ratings service; and determining based on the settings and 
the content category for the specified site identifier whether to access the Internet site referenced by the specified 
site identifier 

15 

35. The computer-readable medium of claim 34, wherein the specified site identifier is a Uniform Resource Locator 
("URL'O 

36. A computer-readable medium having computer-executable instnjctlons for performing a method for determining 
20 whether a user of a computer may view an Internet site referenced by a specified site identifier, wherein the com- 
puter has an allow-block list and a local ratings cache, the method comprising: obtaining an age group for the user; 
obtaining an age group nrtap that designates Internet site content categories that at least the age group is permitted 
to access; determining whetherthe allow-block list references the specified site identifier and, if so. enabling access 
to the site referenced by the specified site Identifier if designated In the allow-block list as allowed and disabling 

25 access to the site referenced by the specified site identifier if designated In the allow-block list as disallowed; 

searching, If the allow-block list does not reference the specified site Identifier, the local ratings cache to determine 
If the specified site Identifier is referenced therein and, if not, obtairiing a content category for the designated site 
Identifier from a ratings sen/Ice; and detemilning, if the allow-block list does not reference the specified site iden- 
tifier, based on the age group, whether the user's age group is permitted to access the content category for the 

30 specified site identifier, and. if so, pemiltting access to the Internet site referenced by the specified site identifier 

37. IhB comput6r-read£fble medium of claim 36, wherein the specified site identifier is a Uniform Resource Locator 
(■URL-) 

33 38. A computer-readable medium having computer-executable instructions for perfomnlng a method for determining 
whether a user of a local computer may view an Internet site referenced by a specified site Identifier, wherein the 
local computer has a local ratings cache and Is operable to communicate via a network with a content settings 
sen/tce containing an age group for the user and an age group map, the method comprising: obtaining an age 
group and allow-block list for the user from the content settings service; obtaining an age group map from the 

40 contents setting sen/ice; detemnlning whether the allow-block list references the specified site identifier and, if so, 

enabling access to the site referenced by the spedfied site identifier if designated in the allow-block list as allowed 
and disabling access to the site referenced by the specified site Identifier if designated In the allow-block list as 
disallowed; searching, if the allow-block list does not reference the specified site Identifier, the local ratings cache 
to detemiine whether the local ratings cache references the specified site Identifier and, If not. obtaining a content 

45 category for the specified site identifier from a ratings sen^ice; and detemiining, if the allow-block list does not 

reference the specified site Identifier, based on the age group, whether the user's age group is permitted to access 
the content category for the specified site identifier, and, If so, permitting access to the Internet site referenced by 
the specified site identifier 

50 39. The computer system of claim 38, wherein the specified site Identifier is a Uniform Resource Locator ("URL"). 

40. A computer-readable medium having computer-executable Instructions for a computer system for determining 
whether a user of a computer having settings forthe user may view an Internet site referenced by a specified site 
identifier, the system comprising: a local ratings cache storable on the computer that Includes at least one site 
55 Identifier and a content category associated therewith; a cache refresher storable on the computer that determines 

whether the local ratings cache references the specified site Identifier and, if not, obtains a content category for 
the specified site-Identifier from a ratings service and stores the content category in said local ratings cache; and 
, a local ratings interpreter storable on the computer that detennines based on the settings for the user and the 
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content category for the specified site Identifier whether to allow the user to access the Internet site referenced by 
the specified site identifier 

41 The computer-readable medium of claim 40, further comprising an allow-block list storable on the computer and 
adapted to contain primary site Identifiers and secondary site Identifiers and. for each such site Identifier, a des- 
ignation of whether viewing of the site by the user either Is allowed or fs disallowed, wherein, regardless of the 
determination by said local ratings interpreter, the computer permits access to the site referenced by the specified 
site identifier if designated as allowed and denies access to the site referenced by the specified site identifier if 
designated as disallowed 

42. The computer system of claim 40. wherein the specified site identifier is a Uniform Resource Locator ("URL"). 

43 A computer-readable medium having computer-executable Instructions for a computer system for determining 
whether a computer user having a designated user age group may view an Internet site referenced by a specified 

15 site Identifier, the system comprising: an age group map storable on the computer that designates content cate- 

gories of Internet sites that at least the user age group is permitted to access; a local ratings cache storable on 
the computerthat contains at least one site identifier and a content category associated therewith; a cache refresher 
storable on the computerthat detemilnes whether the local ratings cache references the specified site identifier 
and, if not, obtains a content category for the specified site identifier from a ratings service and stores the content 

20 category in said local ratings cache; and a local ratings interpreter storable on the computerthat determines whether 

the age group map permits the user's age group to access the content category forthe specified site Identifier and, 
If so, pemiits access to the Internet site referenced by the specified site identifier 

44 The computer-readable medium of claim 43. further comprising an allow-block list storable on the computer and 
25 adapted to contain primary site identifiers and secondary site identifiers and. for each such site identifier, a des- 
ignation of whether viewing of the site by the user either is allowed or is disallowed, wherein, regardless of the 
determination by said local ratings interpreter, the computer penults access to the site referenced by the specified 
site identifier If designated as allowed and denies access to the site referenced by the specified site identifier if 
designated as disallowed 

45. The computer-readable medium of ciaim 43, wherein the specified site identifier Is a Unifomi Resource Locator 
("URL") 

46 A computer-readable medium having computer-executable Instructions for a computer, comprising: means for 
35 obtaining settings for the user; means for searching a local ratings cache to detennine whether the local ratings 

cache references the specified site Identifier and. if not, obtaining a content category for the specified site Identifier 
from a ratings sen/Ice; and means tor determining based on the settings for the user and the content category for 
the specified site identifier whether to access the Internet site referenced by the specified site identifier 

40 47. The computer system of claim 45, wherein the specified site identifier is a Uniform Resource Locator ("URL") 

48 In a networked computing environment having a content settings service containing a user age group and an allow- 
block list for a user and an age group map. a method for communicating the settings forthe user toa tocal computer, 
comprising- establishing a communtoattons session between the content settings service and the local computen 
45 transmitting to the local computer the user age group and allow-biock list for a specified user; and transmitting to 

the local computer the age group map 
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